CVE-2004-0501

Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message…

published June 3, 2004

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18741 · 97.3th percentile
Published
2004-06-03T04:00Z
EPSS history
Timeline
  • 03 JUN 04:00Z
    Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message…
    cvelistv5